Поиск уязвимостей
Количество 9
Количество 9
GHSA-697m-2pgc-69m6
Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
CVE-2016-1967
Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
CVE-2016-1967
Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
CVE-2016-1967
Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207.
CVE-2016-1967
Mozilla Firefox before 45.0 does not properly restrict the availabilit ...
BDU:2016-00751
Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию или обойти существующую политику ограничения доступа
openSUSE-SU-2016:0731-1
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
ALT-PU-2016-1277
ALT-PU-2016-1277: package `firefox` update to version 45.0.1-alt1
ALT-PU-2016-1454
ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-697m-2pgc-69m6 Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | CVE-2016-1967 Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207. | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
 | CVE-2016-1967 Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207. | CVSS2: 4.3 | 2% Низкий | больше 10 лет назад |
 | CVE-2016-1967 Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls after restoring a browser session. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-7207. | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
| CVE-2016-1967 Mozilla Firefox before 45.0 does not properly restrict the availabilit ... | CVSS3: 6.5 | 2% Низкий | больше 10 лет назад |
 | BDU:2016-00751 Уязвимость браузера Firefox, позволяющая нарушителю получить конфиденциальную информацию или обойти существующую политику ограничения доступа | CVSS2: 4.3 | 2% Низкий | больше 10 лет назад |
 | openSUSE-SU-2016:0731-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss | больше 10 лет назад | ||
| ALT-PU-2016-1277 ALT-PU-2016-1277: package `firefox` update to version 45.0.1-alt1 | CVSS3: 9.8 | больше 10 лет назад | |
| ALT-PU-2016-1454 ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1 | CVSS3: 10 | больше 10 лет назад |
Уязвимостей на страницу